This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft File: CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft (raw, json) Hash identifier: p4OG2ICegqgMcbZsB8M8KK9FfL92uXKAW4Lqqw7Ct0I= Subject key identifier: 00:95:19:08:A7:9A:EA:99:73:6C:60:26:F0:5C:EA:91:CC:C6:BE:D5 Authority key identifier: CC:A1:E6:73:6D:B5:34:7C:DA:8F:22:4F:0C:85:72:9C:50:FD:09:1C Certificate issuer: /CN=cca1e6736db5347cda8f224f0c85729c50fd091c Certificate serial: 2E07248AD8ADE8ECB18AE5EA5ED9E0CE612333 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKHmc221NHzajyJPDIVynFD9CRw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft Manifest number: B2 Signing time: Fri 05 Dec 2025 18:35:47 +0000 Manifest this update: Fri 05 Dec 2025 18:30:47 +0000 Manifest next update: Sat 06 Dec 2025 19:02:47 +0000 Files and hashes: 1: CCA1E6736DB5347CDA8F224F0C85729C50FD091C.crl (hash: l84WxpASXK73eMoyzDVJkXB7C22giFVL79LC+iypKc0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.crl rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft rsync://rpki.ripe.net/repository/DEFAULT/zKHmc221NHzajyJPDIVynFD9CRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 19:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:07:24:8a:d8:ad:e8:ec:b1:8a:e5:ea:5e:d9:e0:ce:61:23:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cca1e6736db5347cda8f224f0c85729c50fd091c Validity Not Before: Dec 5 18:30:47 2025 GMT Not After : Dec 6 19:02:47 2025 GMT Subject: CN=00951908A79AEA99736C6026F05CEA91CCC6BED5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0a:e9:31:d1:63:45:ec:c0:bd:e1:f5:4a:e5: dc:c2:df:d0:5a:ea:99:d1:03:24:d0:06:1a:f5:b9: 56:cc:61:35:71:a5:eb:d0:09:ce:02:11:71:32:da: e8:ee:42:86:81:6a:db:9e:81:46:7b:ba:a0:3e:14: 29:72:a6:62:4c:28:1e:db:10:c2:ab:ae:5c:8e:58: 59:d5:3e:8d:bd:d3:aa:52:34:88:78:53:d3:f0:e1: 30:56:f8:15:8f:fb:e5:7a:2a:39:0d:c3:f9:00:0a: b7:30:ce:a4:0a:7a:07:84:5d:8c:e0:62:5d:52:8a: 58:50:09:78:c2:de:52:79:78:22:f3:bc:f5:28:c9: c8:a7:d0:d0:6c:62:12:d7:16:53:0c:75:6f:47:61: 0a:2a:42:43:d0:67:38:ee:4a:ea:d5:2e:8f:1b:78: 21:55:29:8c:24:9b:a7:1d:12:18:38:aa:1f:bb:88: d9:f5:47:79:cb:87:f5:c0:1d:46:0c:a0:c9:00:2e: df:4f:3d:47:21:18:8d:2a:14:28:33:05:aa:35:53: 5b:1a:41:4d:1a:4e:8d:64:88:a6:8d:d1:4b:30:ac: 1c:2f:5b:fd:29:60:46:49:09:86:6a:a1:92:70:59: 33:bb:77:ac:3f:d0:ac:1e:6f:dc:af:21:bd:54:50: cf:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:95:19:08:A7:9A:EA:99:73:6C:60:26:F0:5C:EA:91:CC:C6:BE:D5 X509v3 Authority Key Identifier: keyid:CC:A1:E6:73:6D:B5:34:7C:DA:8F:22:4F:0C:85:72:9C:50:FD:09:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKHmc221NHzajyJPDIVynFD9CRw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:4b:44:fb:b7:db:37:95:68:76:e2:f7:df:83:99:72:c4:18: 43:e5:9a:57:9f:ff:8b:77:e1:f4:09:af:34:9f:80:7e:cb:29: 6f:05:55:64:3b:2b:3d:c4:18:6d:41:a5:ed:bb:65:5c:9f:34: bd:1a:4a:be:3d:ad:2f:4c:38:49:bd:11:5a:38:c6:aa:01:26: 95:2a:4c:4f:5e:fd:4e:a7:48:36:0b:96:01:71:74:51:78:f6: 61:70:fa:cf:4d:22:2a:55:46:8a:e3:f1:c0:72:84:63:02:c5: 15:d4:a0:00:ef:b4:61:28:2a:20:e7:64:7d:25:cc:82:8a:fe: 35:10:77:50:a9:3d:e7:db:00:dc:1d:79:24:8c:68:ee:a6:da: 1c:a4:08:83:39:54:fc:a3:25:f2:75:43:ff:ed:ab:7c:a1:97: 67:87:5c:20:ed:e7:55:2d:18:34:c7:bb:da:5a:03:71:74:86: 17:d7:94:c7:a7:45:d9:c5:fb:91:bc:14:ed:40:f8:6c:6a:86: 24:9d:a7:90:6b:0f:8b:da:c5:e7:47:10:e4:ca:92:f2:6c:13: 64:dd:61:df:0f:7d:79:b7:63:57:21:ad:1e:f3:f5:8c:35:3d: 3f:25:96:ad:72:9c:89:32:02:38:b9:f8:c7:71:b8:8d:0a:95: 05:f3:c4:52 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgITLgckitit6OyxiuXqXtngzmEjMzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhjY2ExZTY3MzZkYjUzNDdjZGE4ZjIyNGYwYzg1NzI5YzUw ZmQwOTFjMB4XDTI1MTIwNTE4MzA0N1oXDTI1MTIwNjE5MDI0N1owMzExMC8GA1UE AxMoMDA5NTE5MDhBNzlBRUE5OTczNkM2MDI2RjA1Q0VBOTFDQ0M2QkVENTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALMK6THRY0XswL3h9Url3MLf0Frq mdEDJNAGGvW5VsxhNXGl69AJzgIRcTLa6O5ChoFq256BRnu6oD4UKXKmYkwoHtsQ wquuXI5YWdU+jb3TqlI0iHhT0/DhMFb4FY/75XoqOQ3D+QAKtzDOpAp6B4RdjOBi XVKKWFAJeMLeUnl4IvO89SjJyKfQ0GxiEtcWUwx1b0dhCipCQ9BnOO5K6tUujxt4 IVUpjCSbpx0SGDiqH7uI2fVHecuH9cAdRgygyQAu3089RyEYjSoUKDMFqjVTWxpB TRpOjWSIpo3RSzCsHC9b/SlgRkkJhmqhknBZM7t3rD/QrB5v3K8hvVRQzxMCAwEA AaOCAkcwggJDMB0GA1UdDgQWBBQAlRkIp5rqmXNsYCbwXOqRzMa+1TAfBgNVHSME GDAWgBTMoeZzbbU0fNqPIk8MhXKcUP0JHDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u ZXQvcmVwb3NpdG9yeS9jNTgzNmU2MC02YTkyLTQ3ZWYtOWI5Yi05MmE4NGQ2ZDM1 YmEvMC9DQ0ExRTY3MzZEQjUzNDdDREE4RjIyNEYwQzg1NzI5QzUwRkQwOTFDLmNy bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvektIbWMyMjFOSHphanlKUERJVnluRkQ5 Q1J3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M1ODM2ZTYwLTZh OTItNDdlZi05YjliLTkyYTg0ZDZkMzViYS8wL0NDQTFFNjczNkRCNTM0N0NEQThG MjI0RjBDODU3MjlDNTBGRDA5MUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAwS0T7t9s3lWh24vffg5ly xBhD5ZpXn/+Ld+H0Ca80n4B+yylvBVVkOys9xBhtQaXtu2VcnzS9Gkq+Pa0vTDhJ vRFaOMaqASaVKkxPXv1Op0g2C5YBcXRRePZhcPrPTSIqVUaK4/HAcoRjAsUV1KAA 77RhKCog52R9JcyCiv41EHdQqT3n2wDcHXkkjGjuptocpAiDOVT8oyXydUP/7at8 oZdnh1wg7edVLRg0x7vaWgNxdIYX15THp0XZxfuRvBTtQPhsaoYknaeQaw+L2sXn RxDkypLybBNk3WHfD315t2NXIa0e8/WMNT0/JZatcpyJMgI4ufjHcbiNCpUF88RS -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:06 2025 by rpki-client